Tag Archives: authentication

Upcoming talk on password managers

On Wednesday (12/17), Collin Jackson will be giving a talk at MIT titled, “Extracting Passwords from JavaScript Password Managers“. I can’t go due to scheduling conflicts but it seems worth considering if you are local and interested in my post about PassPack and Clipperz. I didn’t see any obvious papers from Collin’s website [...]

The difference between Clipperz and PassPack

Clipperz and PassPack are two web services that store your passwords for you, and provide one (or two) click login to those sites whose passwords it keeps. In doing so, these services hopefully encourage you to select strong passwords that you wouldn’t otherwise be able to remember and thus improve your overall security. [...]

Improving web authentication

You use passwords, possibly dozens of passwords, to authenticate to websites daily. Passwords are a useful authentication tool because they function as a “thing-you-know” (a shared secret between you and the server) and because passwords can be changed (in case of loss, unlike say, your fingerprints).

In a diatribe against OpenID titled, “Goodbye, Passwords. [...]